1. Business operator
1.1 Kivi Climbing OÜ (hereinafter “Kivi”) is a company established in Estonia and registered with the Estonian Commercial Register under no. 16109058.
1.2 Contact address:
Kivi Climbing OÜ
Pärnu mnt 139e, 11317, Tallinn, Estonia
2. Processing of Personal Data
2.1 What data do we collect?
Kivi collects the following data:
Personal identification information: Name, email, data of birth, phone
2.2 How do we collect your data?
2.2.1 You directly provide Kivi with most of the data we collect. We collect data and process data when you:
Register membership or place an order for any of our products or services;
Voluntarily complete a customer survey or provide feedback on any of our message boards or via email;
Use or view our website via your browser’s cookies;
2.2.2 Kivi may also receive your data indirectly from the following sources:
A person registering for our membership. We ask them to provide an emergency contact, for use only in an emergency. We ask for the contact’s name, containing phone number and relationship to the person.
2.3 How we will use your data?
Kivi collects your data so that we can:
2.3.1 Process your registration, your order, manage your account;
2.3.2 Email you with special offers on our services and notifications regarding the services you subscribe to.
2.3.3 Contact you in case of an emergency.
2.4 How do we store your data?
2.4.1 Kivi securely stores your data at data centers located in the territory of the European Union. The data centers are protected by measures Zone Media OÜ provides.
2.4.2 We will keep your data provided in section 22.214.171.124 for 5 years. Once this time period has expired, we will delete your data from our database.
2.5.1 Kivi would like to send you information about our products and services of ours that we think you might like.
2.5.2 If you have agreed to receive marketing, you may always opt-out at a later date. You have the right at any time to stop Kivi from contacting you for marketing purposes.
3. Rights of Data Subjects
3.1 The data subject has the following rights:
3.1.1 To obtain from Kivi confirmation whether personal data concerning the data subject is processed;
3.1.2 Where personal data concerning the data subject is processed, obtain from Kivi the information listed in GDPR Article 15(1);
3.1.3 To request that Kivi rectify incorrect personal data pertaining to the data subject;
3.1.4 To provide to Kivi additional data so that incomplete personal data pertaining to the data subject is completed;
3.1.5 To request that Kivi delete, on conditions set forth in GDPR Article 17. Please note that in that event Kivi might be unable to transact with you in any way;
3.1.6 To request that Kivi restrict processing personal data pertaining to the data subject in situations explained in GDPR Article 18 (1);
3.1.7 To receive from Kivi, in .csv format, the personal data which the data subject has provided to Kivi;
3.1.8 To object, on conditions set forth in GDPR Article 21, to processing of the data subject’s personal data when Kivi processes the personal data for the purposes of other legitimate interest pursued by Kivi;
3.1.9 To withdraw consent for processing biometric data. Withdrawal of consent shall not affect the lawfulness of processing the data prior to the withdrawal. Please note that in that event Kivi might be unable to transact with you in any way.
3.1.10 To lodge a complaint with a supervisory authority (Andmekaitse Inspectsioon, firstname.lastname@example.org, Tatari 39, Tallinn 10134, Estonia).
3.2 To exercise any of the rights referred to in clause 12 (except for the right to lodge a complaint with a supervisory authority) the data subject should write to Kivi using the details set forth in section 1.2. Kivi shall answer to the request without undue delay and in any event within one month of the receipt of the request (that period may, taking account of the circumstances, be extended by two months). The time of answering will depend on the number of requests Kivi receives as well as on the content of a particular request.